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DETAILED ACTION 

In view of Appeal Brief filed on 4 January 201 0 and an authorization for this Examiner's 
Amendment given in a telephone interview with Laura M. Kelley on 12 January 2010, the 
claimed subject matters are thus distinctly pointed out as patentable features to place the 
application in the condition for allowance. 

Examiner's Amendment 

An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this Examiner's Amendment was given in a telephone interview with 
Laura M. Kelley (Reg. No. 48,441 ) on 12 January 2010. 

This application has been amended as follows: 
IN THE CLAIMS 

Replace claim 1, 14, 18 and 31 as follows. 
CLAIM 1 : 

A method of providing a dynamic security management in an apparatus, the apparatus 
comprising: a platform for running an application; a security manager for handling access of the 
application to functions existing in the apparatus; an application interface between the platform 
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and the application; a set of access permissions stored in the apparatus and used by the 
security manager for controlling access of the application to functions through the application 
interface the method comprising: 

configuring at least one processor to perform the functions of: 

downloading into the apparatus an object containing additional access permissions and 
other permission information to be associated with security policy contained in the downloaded 
object as well as access permissions already existing in the apparatus, wherein the permissions 
are applicable to at least one function, the object comprising new routines and/or new functions; 

verifying the object and the associated permissions linked to the existing access 



permissions in the sec urity policy and the object containing additional acc ess permissions and 

installing the access permissions together with the existing permissions, the object 
enhancing the application interface with the new routines and/or new functions. 



A method of providing a dynamic security management in an apparatus, the apparatus 
comprising: a platform for running an application; a security manager for handling access of the 
application to functions existing in the apparatus; an application interface between the platform 
and the application; a set of access permissions stored in the apparatus and used by the 
security manager for controlling access of the application to functions through the application 
interface, the method comprising: 




CLAIM 14: 
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storing the access permissions in a security policy; 

downloading into the apparatus an object containing additional access permissions and 
other permission information to be associated with security policy contained in the downloaded 
object as well as the access permissions aireadv existing in the security policy, wherein the 
permissions are applicable to at least one function and the object includes new routines and/or 
new functions; and 

verifying the object and the associated permissions jinked to the existing access 
permissions: 

providing the security policy with a hierarchical structure including the access 
permissions in the security policy and the object containing additional access permissions and 
other permission information so that the object enhances the application interface with the new 
routines and/or new functions ; and 

CLAIM 18 

An apparatus with dynamic security management comprising: 
a platform for running an application; 

a security manager for handling access of the application to functions existing in the 
apparatus; 

an application interface between the platform and the application; 

a set of access permissions stored in the apparatus and used by the security manager 
for controlling access of the application to functions through the application interface wherein 
the apparatus is configured to download an object containing ; 3ddi|iona] access permissions and 
other permission information to be associated with security policy contained in the downloaded 
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objects as well as access permissions already existing in the apparatus, wherein the 
permissions are applicable to at least one function, the object comprising new routines and/or 
new functions; 

to verify the object and the associated permissions iinked to the existing access 
permissions ; »d 

to provide the security policy with a hierarchical structure including the access 
permissions in the security poiicv and the object containing additional access permissions and 
other permission information; and 

to install the access permissions together with the existing permissions, the object 
enhancing the application interface with the new routines and/or new 
functions. 



CLAIM 31 

An apparatus for providing a dynamic security management comprising: 
a platform for running an application; 

a security manager for handling access of the application to functions existing in the 
apparatus; 

an application interface between the platform and the application; 

a set of access permissions stored in the apparatus and used by the security manager 



for controlling access of the application to functions through the application interface, whefeift 




object containing additional access permissions to be associated with security policy contained 
in the downloaded objects as well as access permissions already existing in ten the apparatus, 
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wherein the permissions are applicable to at least one function, said object comprising new 
routines and/or new functions; 

to verify the object and the associated permissions linked to the existing access 
fiSMissiojis; sr4 

lo.prQyjdejhe security. policy 
permissions in the security policy and the object containing additional access permissions and 
other permission information; and 

to install the access permissions together with the existing permissions; said object 
enhancing the application interface with the new routines and/or new functions. 

Allowable Subject Matter 

Claims 1 - 35 are allowed. 

The following is an examiner's statement of reasons for allowance: 
The above mentioned claims are allowable over prior arts because the CPA (Cited Prior Art) of 
record fails to teach or render obvious the claimed limitations in combination with the specific 
added limitations recited in claims 1, 14, 18 and 31 (& associated dependent claims). 

Claims 1 - 35 are allowable in light of the Applicant's arguments on Appeal Brief and 
Examiner Amendment and in light of the prior art made of record. 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to LONGBIT CHAI whose telephone number is (571)272-3788. The 
examiner can normally be reached on Monday-Friday 9:00am-5:00pm. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, William R. Korzuch can be reached on (571) 272-7589. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Longbit Chai/ 
Primary Patent Examiner 
Art Unit 2431 
1/12/2010 



